Le Mon, 13 Jan 2014 12:48:39 +0100
Michael Scherer <[email protected]> a écrit :

> > Je me demande si les Freebox et autres box sont aussi des
> > passoires.
> 
> Y a des chances que non, les opérateurs font les mises à jours sur
> les boitiers, et je pense que l'interface d'admin est utilisable
> uniquement depuis le réseau de l'opérateur.
> (...)

Il y a la confirmation que c'est bien SerComm, qui a participé à leurs
fabrications, qui a introduit la faille de sécurité. Une clé, celle
découverte à cette occasion, figure en tant que constante dans l'un de
leurs fichiers d'en-tête :

#define SCM_MAGIC 0x53634d4d

Les matériels présentant la porte dérobée seraient donc parmi cette
liste :

================================================================
3Com OfficeConnect 3CRTRV10075 (WL-534),,wireless router,Marvell
4Home ControlPoint 2000 (CP2000),,home monitoring gateway,Broadcom
ADT iHub (iHUB-3001B-ADT),,home automation controller,Broadcom
APC WMR1000G,,travel router\,access point\,bridge,Marvell
AboCom ARM904,,wireless router,Brecis
AboCom ARM914,,wireless router,Marvell
Addtron ADR-E200P,January 2001,router,
Arris TG862G,,wireless router\,cable modem\,analog phone gateway,Texas 
Instruments
Arris WR2100,,repeater,Ralink
Aruba Networks AP-105,,access point,
Aruba Networks APIN0114,,access point,
Aruba Networks APIN0115,,access point,
Belkin (My Essentials) ME1004-R,,wireless router,Marvell
Belkin F5D7132,,extender,Marvell
Belkin F5D7230-4 v4,,wireless router,Marvell
Belkin F5D7230-4 v6,,wireless router,Marvell
Belkin F5D7230-4 v8,,wireless router,Broadcom
Belkin F5D7231-4 v2,,wireless router,Broadcom
Belkin F5D7231-4 v3,,wireless router,Broadcom
Belkin F5D7234-4 v1,,wireless router,Broadcom
Belkin F5D7632-4 v5,,wireless router\,dsl modem,Texas Instruments
Belkin F5D8231-4 v2,,wireless router,Marvell
Belkin F5D8231-4 v4,,wireless router,Atheros
Belkin F5D8232-4 v1,,wireless router,Atheros
Belkin F5D8232-4 v2,,wireless router,Ralink
Belkin F5D8233-4 v4,,wireless router,Ralink
Belkin F5D8236-4 v3,,wireless router,Ralink
Belkin F5D9231-4 v2,,wireless router,Ralink
Belkin F6D4230-4 v1,,wireless router,Ralink
Belkin F7D4555,,bridge,Realtek
Belkin F7D5301 v3,,wireless router,Realtek
Belkin F7D6301 v3,,wireless router,Realtek
Belkin F9K1001 v1,,wireless router,Realtek
Belkin F9K1002 v1,,wireless router,Realtek
Belkin F9K1002 v3,,wireless router,Realtek
Belkin F9K1102 v2,,wireless router,Realtek
Belkin F9K1105 v2,,wireless router,Realtek
Belkin F9K1107,19 October 2011,wireless router,Realtek
Belkin F9K1116 v1,1 April 2013,wireless router,Realtek
Belkin F9K1117 v2,,wireless router,Realtek
Buffalo WYR-G54,,wireless router,Marvell
CNet CNWR-811P,,wireless router\,print server,
Cisco RV180W,,wireless router,Cavium
Cisco WAP321,,access point,Broadcom
Cisco WAP4410N,,access point,Atheros
Cisco WVC210,,camera,
Corega CG-BARPROG,2005,router,Star
D-Link DPR-1040,,print server,
Diamond SupraMax DSL642WLG,,wireless router\,dsl modem,Texas Instruments
Dynex DX-WEGRTR,,wireless router,Broadcom
Dynex DX-WGRTR,,wireless router,Broadcom
Gateway WBR-100,,wireless router,Marvell
Honeywell Total Connect WAP,,wireless router,Ralink
HotBrick SoHo 401W,,wireless router,Marvell
LevelOne WBR-2400TX,,wireless router,Texas Instruments
LevelOne WBR-3408 v1,,wireless router,Marvell
LevelOne WBR-3600,26 February 2008,wireless router\,dsl modem,Conexant
LevelOne WBR-6000 v1,,wireless router,Marvell
LevelOne WBR-6000 v2,,wireless router,Atheros
LevelOne WBR-6002,,wireless router,Ralink
LevelOne WBR-6011,,wireless router,Ralink
LevelOne WBR-6601,6 January 2010,wireless router\,dsl modem,Ralink
Linksys BEFSR41W,,wireless router,Brecis
Linksys BEFSR41W-RN,,wireless router,Brecis
Linksys LAPN300,,access point,
Linksys LAPN600,,access point,
Linksys NSLU2,,NAS,Intel
Linksys WAG120N,,wireless router\,dsl modem,Ralink
Linksys WAG160N v1,,wireless router\,dsl modem,Broadcom
Linksys WAG160N v2,,wireless router\,dsl modem,Broadcom
Linksys WAG200G,,wireless router\,dsl modem,Texas Instruments
Linksys WAG310G,,wireless router\,dsl modem\,analog phone gateway,
Linksys WAG320N,,wireless router\,dsl modem,Broadcom
Linksys WAG325N v1,,wireless router\,dsl modem,Broadcom
Linksys WAG325N v2,,wireless router\,dsl modem,Broadcom
Linksys WAG54G2,,wireless router\,dsl modem,Conexant
Linksys WBP54G v1,,bridge,Marvell
Linksys WBP54G v2,,bridge,Marvell
Linksys WMA11B,,digital media adapter,Intel
Linksys WPS54G v1,,print server,Marvell
Linksys WPS54G v2,,print server,Marvell
Linksys WPS54GU2,,print server,Brecis
Linksys WPSM54G v1.0,,print server,RDC
Linksys WPSM54G v1.1,,print server,RDC
Linksys WRT300N v2,,wireless router,Intel
Linksys WRT350N v2,,wireless router,Marvell
Linksys WRT54GC v1,,wireless router,Marvell
Linksys WRT54GC v2,,wireless router,Marvell
Linksys WRT54GC v3,,wireless router,
Linksys WRVS4400N v1.1,,wireless router,Star
Linksys WRVS4400N v2.0,,wireless router,Star
Linksys WTR54GS v1,,wireless router,Broadcom
Linksys WTR54GS v2.0,,wireless router,Broadcom
Linksys WTR54GS v2.1,,wireless router,Broadcom
Linksys WVC100N,,camera,Prolific
Linksys WVC200,,camera,Texas Instruments
Linksys WVC2300,,camera,
Linksys WVC54GC v1.0,,camera,Texas Instruments
Linksys WVC54GCA,,camera,
Linksys WVC80N,,camera,
Meru Networks AP1014i,,access point,Broadcom
Motorola WPS870G,,print server,Brecis
Netgear D6200,8 March 2013,wireless router\,dsl modem,Broadcom
Netgear DG834GT,,wireless router\,dsl modem,Broadcom
Netgear DG834GVSP,,wireless router\,dsl modem\,analog phone gateway,Texas 
Instruments
Netgear DG834Gv1,,wireless router\,dsl modem,Texas Instruments
Netgear DG834Gv2,,wireless router\,dsl modem,Texas Instruments
Netgear DG834Gv3,,wireless router\,dsl modem,Texas Instruments
Netgear DG834Gv4,,wireless router\,dsl modem,Broadcom
Netgear DG834Nv1,,wireless router\,dsl modem,Broadcom
Netgear DG834PN,,wireless router\,dsl modem,Broadcom
Netgear DGFV114G,,wireless router\,dsl modem,Texas Instruments
Netgear DGN1000,,wireless router\,dsl modem,Infineon
Netgear DGN2000,,wireless router\,dsl modem,Broadcom
Netgear DGN2200v3,,wireless router\,dsl modem,Broadcom
Netgear DGN3500,,wireless router\,dsl modem,Infineon
Netgear DGND3300,,wireless router\,dsl modem,Broadcom
Netgear DGND3700v2,,wireless router\,dsl modem,Broadcom
Netgear DGND4000,18 October 2012,wireless router\,dsl modem,Broadcom
Netgear FM114P,May 2002,wireless router\,print server,ADMtek
Netgear FVG318v1,,wireless router,Atheros
Netgear FVS318G,,VPN Router Firewall,Cavium
Netgear FVS318N,,wireless router,Cavium
Netgear FWG114Pv1,,wireless router,Brecis
Netgear FWG114Pv2,,wireless router,Broadcom
Netgear JNR3000,,wireless router,Realtek
Netgear JNR3210,,wireless router,Realtek
Netgear ME103,,access point,Texas Instruments
Netgear MR814v2,,wireless router,Marvell
Netgear MR814v3,,wireless router,Marvell
Netgear WAG102,,access point,Atheros
Netgear WG102,,access point,Atheros
Netgear WGE111,,bridge,Marvell
Netgear WGM124,2005,wireless router,Intel
Netgear WGPS606,,print server,Broadcom
Netgear WGR101,,wireless router,Marvell
Netgear WGR613VAL,,wireless router\,analog phone gateway,Texas Instruments
Netgear WGR614v1,,wireless router,Brecis
Netgear WGR614v4,,wireless router,Marvell
Netgear WGR615V v2,,wireless router\,analog phone gateway,Texas Instruments
Netgear WGX102v1,,access point,Marvell
Netgear WGX102v2,,access point,Marvell
Netgear WNHD3004,,access point\,bridge,Quantenna
Netgear WNR834Bv1,,wireless router,Broadcom
Netgear WPNT834,December 2005,wireless router,Realtek
OvisLink AirLive WN-200R,,wireless router,Ralink
Proxim Skyline 802.11b Wireless Broadband Gateway (8584),2001,wireless router,
SerComm AP51DA,,access point,Atheros
SerComm IP1006GA/GB,,wireless router\,dsl modem,Broadcom
SerComm IP1006RR,,wireless router,Ralink
SerComm IP1006SR,,wireless router,Ralink
SerComm IP706ST,,wireless router,Texas Instruments
SerComm IP802SM v1,,access point,Marvell
SerComm IP802SM v2,,access point,Marvell
SerComm IP806BB,,unspecified,Broadcom
SerComm IP806GA/GB v1,,wireless router\,dsl modem,Texas Instruments
SerComm IP806GA/GB v2,,wireless router\,dsl modem,Texas Instruments
SerComm IP806GA/GB v3,,wireless router\,dsl modem,Texas Instruments
SerComm IP806GA/GB v4,,wireless router\,dsl modem,Conexant
SerComm IP806MA,,wireless router,Realtek
SerComm IP806SM,,wireless router,Marvell
SerComm IP822LM,,access point,Marvell
SerComm IP906SM,,wireless router,Marvell
SerComm NA900,,wireless router,Ralink
SerComm NCS801A,,camera,Texas Instruments
SerComm NV842,,video server,Texas Instruments
SerComm OC825,,camera,Texas Instruments
SerComm PS801Hv1,,print server,Marvell
SerComm PS801Hv2,,print server,RDC
SerComm RC8221,,camera,Texas Instruments
SerComm RC8230,,camera,
SerComm RC8261,,camera,Texas Instruments
SerComm RP101,,repeater,Ralink
Siemens SS2524,3 February 2003,wireless router,
Siemens SS2624 v1,,wireless router,Samsung
Siemens SS2624 v2,31 May 2002,wireless router,
Sitecom WL-106,,wireless router,Brecis
SparkLAN WX-6615M,,wireless router,Marvell
TRENDnet TEW-431BRP,,wireless router,Marvell
TRENDnet TEW-435BRM,,wireless router\,dsl modem,Texas Instruments
TRENDnet TEW-635BRM V1.0R,,wireless router\,dsl modem,Broadcom
TRENDnet TEW-657BRM,,wireless router\,dsl modem,Ralink
Telefonica Smart Home Gateway (Picasso),,unspecified,MediaTek
USRobotics USR5436,,print server,Marvell
WatchGuard FS2E5W,,security appliance\,wireless router,
WatchGuard Firebox SOHO 6 (BF4S16E5W),,wireless router,Brecis
Watchguard Firebox Edge X20e-W / X20eW,,wireless router,Intel
================================================================

Source :
http://wikidevi.com/w/index.php?title=Special%3AAsk&q=[[Manuf%3A%3ASerComm]]+[[Global+type%3A%3A~embedded*]]&po=%3FEstimated+date+of+release%3DEst.+release+date%0D%0A%3FEmbedded+system+type%0D%0A%3FCPU1+brand%0D%0A&eq=yes&p[format]=ol&sort_num=&order_num=ASC&p[limit]=500&p[offset]=&p[link]=all&p[sort]=&p[headers]=show&p[mainlabel]=&p[intro]=&p[outro]=&p[searchlabel]=%E2%80%A6+further+results&p[default]=&p[sep]=%2C+&p[template]=&p[columns]=1&p[userparam]=&p[introtemplate]=&p[outrotemplate]=&eq=yes

Source de la source :
https://news.ycombinator.com/item?id=6998258

Source de la source de la source :
https://github.com/elvanderb/TCP-32764

-- 
Christophe HENRY
FR EO EN - http://www.sbgodin.fr

Attachment: signature.asc
Description: PGP signature

_______________________________________________
libre mailing list
[email protected]
http://brassens.heberge.info/cgi-bin/mailman/listinfo/libre

Répondre à